ICSA-18-317-06 Siemens SIMATIC STEP 7 (TIA Portal)
Advisory ansehen veröffentlicht 2018-11-13
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-13811US | medium5.5 | — | ||
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow an attacker to access… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-621493: Password Storage Vulnerability in SIMATIC STEP7 (TIA Portal)self
- ICS Advisory ICSA-18-317-06 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-18-317-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationSIMATIC STEP 7 (TIA Portal)
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:to trusted sources.storage to trusted users. Restrict access to project files on the engineering station and project
- BehobenSIMATIC STEP 7 (TIA Portal)
Update to V15.1 - Download: https://support.industry.siemens.com/cs/us/en/view/109758794
https://support.industry.siemens.com/cs/us/en/view/109758794
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan